From 5675861771fb054a25bb9aa8cbf6896023775ad6 Mon Sep 17 00:00:00 2001
From: masnwilliams <43387599+masnwilliams@users.noreply.github.com>
Date: Fri, 24 Jul 2026 23:00:09 +0000
Subject: [PATCH] Document managed auth tab ownership

---
 auth/profiles.mdx | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/auth/profiles.mdx b/auth/profiles.mdx
index 5bb0cf4..ef9ecc5 100644
--- a/auth/profiles.mdx
+++ b/auth/profiles.mdx
@@ -180,6 +180,12 @@ fmt.Println("Live view:", kernelBrowser2.BrowserLiveViewURL)
 
 By default, Profiles restore existing tabs saved in the profile. Pass `start_url` with the profile to clear those restored tabs and open a specific page when the new browser starts.
 
+<Note>
+Managed Auth controls the tab state of profiles attached to auth connections. Each login or automatic re-authentication starts in a single tab at the configured login URL, or at the domain homepage when no login URL is configured. After a successful authentication, Kernel saves the resulting tab state with the updated authentication data. Failed and canceled sessions leave the saved profile unchanged.
+
+Don't depend on previous tabs or windows remaining in a Managed Auth profile. Set `start_url` when you create a browser if your automation requires a specific first page.
+</Note>
+
 <CodeGroup>
 ```typescript Typescript/Javascript
 const browser = await kernel.browsers.create({